CVE-2026-110735

Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader core/io/resourceformatbinary.cpp, ResourceLoaderBinary::getunicodestring. A string length is read from the resource file into a signed 32-bit integer and compared against the destination buffer size with a...

CVE-2026-110735

The Godot Engine (through version 4.7.2 ) is vulnerable to a heap out-of-bounds write in the binary resource loader, specifically within core/io/resource_format_binary.cpp at ResourceLoaderBinary::get_unicode_string. The root cause is a signed to unsigned conversion error (CWE-195) where a string...

CVE-2026-110735

Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader core/io/resourceformatbinary.cpp, ResourceLoaderBinary::getunicodestring. A string length is read from the resource file into a signed 32-bit integer and compared against the destination buffer size with a...

Docx-Exploit-2021

Docx-Exploit-2021 This docx exploit uses res files inside Microsoft .docx file to execute malicious files. This exploit is related to CVE-2021-40444 If you can not reproduce Kindly message me on Telegram: LazarusRebor...

[SECURITY] Fedora 45 Update: ocaml-res-5.0.2-10.fc45

This OCaml-library consists of a set of modules which implement automatically resizing =3D reallocating datastructures that consume a contiguous part of memory. This allows appending and removing of elements to/from arrays both boxed and unboxed, strings - buffers, bit strings and weak arrays whi...

PT-2026-97882

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the cdx create res attr function. When sysfs create bin file fails, the system frees res attr without setting cdx dev-res attrnum to NULL, resulting in a...

PT-2026-94566

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/cma component where a warning is triggered in the res to rt function during asynchronous address resolution. The problem occurs within the addr handler functi...

PT-2026-85644

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF RES length to the destination buffer digital in recv sensf res memcpys resp-len bytes from a remote NFC-F device response into the NFC SENSF RES MAXSIZE-byte target.sensf res field without an upper-bound...

PT-2026-91297

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF RES length to the destination buffer digital in recv sensf res memcpys resp-len bytes from a remote NFC-F device response into the NFC SENSF RES MAXSIZE-byte target.sensf res field without an upper-bound...

PT-2026-82927

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the maar res walk function. The function uses the wi-num cfg variable as an index for the fixed-size wi-cfg array but performs the capacity check only...

Malicious code in cat-embed-i18n-res (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c612800e80bb36720e75741be9665ab6acbed58bcd5d51065fcedd1d990aaad0 The package's only shipped content, strings.json, is presented as an i18n/translation resource bundle but its values are HTML/JavaScript XSS payloads...

MAL-2026-14471 Malicious code in cat-embed-i18n-res (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c612800e80bb36720e75741be9665ab6acbed58bcd5d51065fcedd1d990aaad0 The package's only shipped content, strings.json, is presented as an i18n/translation resource bundle but its values are HTML/JavaScript XSS payloads...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: a potential memory leak has been fixed in mlx5einitreprx. The memory pointed to by the priv-rxres pointer is not freed during the error-prone execution of mlx5einitreprx, which can lead to a memory leak. This issue has...

Malicious Package

Overview cat-embed-i18n-res is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview log-res is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in log-res (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f23ea1c6c40021fb69210eba68cdbda94b42f4e255f78758778b90ebb09d78 index.js re-exports a desKey string sourced from apps/docs/app/theta.js, which reads apps/docs/app/des.db as UTF-8. des.db contains a heavily...

MAL-2026-14292 Malicious code in log-res (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f23ea1c6c40021fb69210eba68cdbda94b42f4e255f78758778b90ebb09d78 index.js re-exports a desKey string sourced from apps/docs/app/theta.js, which reads apps/docs/app/des.db as UTF-8. des.db contains a heavily...

UBUNTU-CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

PT-2026-68124

Name of the Vulnerable Software and Affected Versions nanoMODBUS versions prior to 1.23.1 Description An out-of-bounds write exists in the Modbus client-side recv read device identification res function FC 0x2B/MEI 0x0E, Read Device Identification within nanomodbus.c. The issue occurs because the...